CVE-2017-2804: High severity Corel Coreldraw Photo Paint X8 vulnerability

Published Apr 24, 2018

Updated

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability.

Affected Software

1 affected component

Corel Coreldraw Photo Paint X8=18.1.0.661

Event History

Apr 24, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2017-2804?

CVE-2017-2804 is a remote out of bound write vulnerability in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661.

What is the severity of CVE-2017-2804?

The severity of CVE-2017-2804 is high, with a severity value of 7.8.

How does CVE-2017-2804 work?

CVE-2017-2804 can be triggered by a specially crafted TIFF file, causing memory corruption.

Which software is affected by CVE-2017-2804?

Corel Coreldraw Photo Paint X8 version 18.1.0.661 is affected by CVE-2017-2804.

How can I fix CVE-2017-2804?

To fix CVE-2017-2804, update Corel Coreldraw Photo Paint X8 to a version that is not affected.